fedora-selinux / selinux-policy

selinux-policy for Fedora is a large patch off the mainline
GNU General Public License v2.0
164 stars 165 forks source link

Allow opafm create NFS files and directories #2047

Closed zpytela closed 7 months ago

zpytela commented 7 months ago

The commit addresses the following AVC denial: type=AVC msg=audit(20.2.2024 03:14:09.354:524) : avc: denied { write } for pid=57860 comm=sm name=/ dev="0:45" ino=4299124166 scontext=system_u:system_r:opafm_t:s0 tcontext=system_u:object_r:nfs_t:s0 tclass=dir permissive=0 type=SYSCALL msg=audit(20.2.2024 03:14:09.354:524) : arch=x86_64 syscall=mkdir success=no exit=EACCES(Operace zamítnuta) a0=0x55a0b1ee4c00 a1=0644 a2=0xfffffffffffffef8 a3=0x0 items=0 ppid=57810 pid=57860 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=sm exe=/usr/lib/opa-fm/runtime/sm subj=system_u:system_r:opafm_t:s0 key=(null)

Resolves: RHEL-17820